Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json)
Hash identifier: SzVUHQoSzp8WPUZb/Ad0KNjVm7df5H8QNHFTIbSyGGI=
Subject key identifier: 7C:66:6F:85:DD:DF:20:D1:9F:5E:E3:EB:09:1B:7A:AD:0A:C6:C0:AC
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial: 0196AE7B9DBD57A005AF0D60DA64C31A7E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
Manifest number: 0A67
Signing time: Thu 08 May 2025 06:00:58 +0000
Manifest this update: Thu 08 May 2025 06:00:58 +0000
Manifest next update: Fri 09 May 2025 06:00:58 +0000
Files and hashes: 1: FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa (hash: icR2KPf1nufIDLG/nPNr5vKSnrpkA3b1gplItzO6jeQ=)
2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: JsbV+iOAoPqFww1wFbKq9JbiLh/HzEEEAEe0FbiIxU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:9d:bd:57:a0:05:af:0d:60:da:64:c3:1a:7e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Validity
Not Before: May 8 06:00:58 2025 GMT
Not After : May 9 06:00:58 2025 GMT
Subject: CN=7c666f85dddf20d19f5ee3eb091b7aad0ac6c0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:d9:0e:4b:a2:ad:eb:3e:d2:a4:c0:82:42:
cf:d5:89:fe:18:fe:0b:0b:99:66:bd:b2:e0:26:6f:
fd:10:e8:e5:a3:7b:1b:57:62:b2:0d:b6:01:e9:b8:
3e:24:42:a1:b1:9d:e2:4f:7e:8e:3b:aa:f6:df:2b:
f4:05:05:b7:9d:83:1c:ec:26:b5:1e:6e:81:d9:b8:
d2:9d:f6:ea:83:c4:5e:bc:4b:55:ed:e7:9f:89:2a:
41:5b:a2:00:aa:3c:21:e8:0e:c2:27:0d:af:d5:45:
41:28:d1:9b:df:8c:b2:21:83:b5:ca:6b:3c:6f:61:
35:7b:c5:fb:ce:0e:aa:82:9a:48:e8:b5:4c:0b:86:
0d:c8:c1:d8:b5:47:52:18:bc:fe:6c:b8:81:24:b8:
11:82:96:f7:bc:8a:3e:5f:9a:9d:d3:37:9e:e3:cf:
d4:a4:9d:ab:c2:94:26:39:0d:99:d5:87:01:2c:5f:
e7:8e:9d:4f:3d:7f:9a:19:af:41:0e:1a:57:51:7c:
fb:51:db:c3:ac:4a:a4:55:db:49:ca:71:b5:ee:13:
98:a1:f4:c3:30:5b:6c:c6:98:4b:ec:3e:4d:f7:60:
12:a2:dc:1f:0b:23:a9:c8:ab:40:96:e3:4c:f7:a6:
63:06:ba:5c:4e:eb:a2:82:da:da:ab:3e:79:32:7e:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:66:6F:85:DD:DF:20:D1:9F:5E:E3:EB:09:1B:7A:AD:0A:C6:C0:AC
X509v3 Authority Key Identifier:
keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:34:29:be:9d:72:02:b9:20:c8:e8:d7:b5:61:2f:6c:bc:73:
2c:4c:75:dc:6b:50:0e:15:3e:af:14:8c:97:32:c0:f4:62:40:
83:4a:6d:58:3c:eb:77:93:e3:31:d9:b2:cd:b6:dd:9f:cf:9e:
24:7f:72:88:f5:59:67:10:ea:19:d3:fa:24:b3:bc:48:db:e6:
7c:47:39:88:56:8f:d0:e6:77:97:ec:c5:ae:8e:b8:86:ef:fe:
3d:7f:1d:b3:74:1a:1e:31:b2:b5:2a:8c:69:f5:bc:a5:f1:0e:
80:71:97:c9:8a:45:de:b9:95:59:39:29:63:13:64:01:a9:c8:
5b:96:5f:d7:bb:27:ea:fa:44:12:dc:e7:8a:e5:34:8e:a6:12:
a0:c3:c6:e4:fe:63:64:65:e7:cc:48:24:97:c2:ed:d2:7e:4a:
25:40:bd:dd:fe:50:6f:36:e1:70:fb:fc:fd:0e:a9:90:35:09:
73:23:54:5d:2a:d5:18:e3:21:50:cf:4f:4f:bd:32:c8:e0:e2:
12:ff:06:38:16:f1:da:37:19:4e:7a:47:10:ac:19:72:6a:d1:
bd:44:3c:8c:0c:90:29:95:a3:bc:82:51:7c:37:c4:46:dd:3b:
37:7d:f4:da:5f:59:ed:bf:6d:bf:82:62:40:56:e3:4f:82:4a:
e2:b9:34:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:41:48 2025 by rpki-client